AMENDMENTS TO THE CLAIMS : 

This listing of claims will replace all prior versions and listings of claims in the 

application. 

COMPLETE LISTING OF THE CLAIMS : 

Claims 1-16 : (Canceled) 

Claim 1 7 : (New) A method of enabling authorized access to an 

application server on a network, comprising the steps of: 

a) requesting authentication over the network, and requesting access to 
the application server for a predetermined time period; 

b) printing encoded, machine-readable indicia having parts of different 
light reflectivity which identify an authenticated user and the predeteraiined time period on a 
portable, physical ticket in response to the requesting step; and 

c) presenting the physical ticket to a reader for electro-optically reading 
the indicia to gain access to the application server on the network only for said predetermined time 
period. 

Claim 18 : (N ew) The method of claim 1 7, wherein the requesting 

step is performed by sending an electronic request to an authentication server on the network. 

Claim 1 9 : (New) The method of claim 1 7, wherein the printing 

is performed on a disposable medium. 

Claim 20 : (New) The method of claim 1 7, wherein the printing 

is performed by printing a two-dimensional bar code symbol. 
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Claim 2 1 : (New) The method of claim 1 7, and further comprising 

situating the network in a public venue. 

Claim 22 : (New) A method of enabling authorized access to a 

network, the method comprising the steps of: 

a) requesting and receiving from a key distribution center over the 
network an electronic ticket signal identifying a user, an application server to be accessed on the 
network, and a predetermined time period for accessing the application server; 

b) printing encoded, machine-readable indicia having parts of different 
light reflectivity which identify the user, the application server to be accessed, and the predetermined 
time period on a portable, physical ticket based on receipt of the electronic ticket signal; and 

c) presenting the physical ticket to a reader for electro-optically reading 
the indicia to obtain from the indicia, data for identifying the user, the application server and the 
predetermined time period, to authorize the identified user to access the network and the identified 
application server only for the predetermined time period. 

Claim 23 : (New) The method of claim 22, wherein the key 

distribution center includes an authentication server and a ticket granting server, and wherein the 
requesting and receiving steps are performed by initially sending a request to the authentication 
server for access to the ticket granting server, by thereupon receiving a response containing a session 
key encrypted with a ticket server key, by thereupon sending a subsequent request to the ticket 
granting server for access to the application server, and by subsequently receiving the electronic 
ticket signal from the ticket granting server. 
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Claim 24 : (New) An arrangement for enabling authorized access 

to a network, comprising: 

a) an authentication center for authorizing access to an application server 
by receiving an authentication request for a predetermined time period from a user, and by 
responding with an electronic ticket signal; 

b) a printer responsive to the electronic ticket signal for printing encoded, 
machine-readable indicia having parts of different light reflectivity which identify the user, an 
application server to be accessed, and the predetermined time period for accessing the application 
server on a portable, physical ticket; and 

c) a reader for electro-optically reading the indicia to authorize the 
identified user to access the identified application server only for said predetermined time period. 

Claim 25 : (New) The arrangement of claim 24, wherein the ticket 

is a printed disposable sheet. 

Claim 26 : (New) The arrangement of claim 24, wherein the 

indicia is a two-dimensional bar code symbol. 

Claim 27 : (New) The arrangement of claim 26, wherein the 

symbol is PDF-417. 

Claim 28 : (New) The arrangement of claim 24, wherein the 

network is located in a public venue. 

Claim 29 : (New) The arrangement of claim 24, wherein the 

network is a wireless local area network. 
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